A flaw was found in GIMP's PSD file format plugin. This vulnerability, an unsigned integer underflow in the `block_rem` variable, occurs when a user opens a specially crafted `.psd` image file. The underflow leads to parser confusion, enabling an attacker to inject arbitrary data as layer resource blocks. This can ultimately result in arbitrary code execution, allowing the attacker to run malicious code on the victim's system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade gimp-libsUpgrade gimp | Oct 11, 2026 | Aug 31, 2026 |
| Amazon Linux Ami 2 | — | Upgrade gimp-debuginfoUpgrade gimp-devel-toolsUpgrade gimpUpgrade gimp-libsUpgrade gimp-devel | Oct 19, 2026 | Oct 19, 2026 |
| Debian | — | Upgrade gimp | Aug 30, 2026 | Aug 30, 2026 |
| Oracle_linux | — | Upgrade gimpUpgrade gimp-libs | Oct 22, 2026 | Aug 10, 2026 |
| Redhat_linux | — | Upgrade gimp-libs-debuginfoUpgrade gimp-devel-tools-debuginfoUpgrade gimp-libsUpgrade gimp-debugsourceUpgrade gimp-debuginfoUpgrade gimpNo solution exists | Aug 12, 2026 | Jun 15, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub